How to remove MicrosoftHost.exe
- File Details
- Overview
- Analysis
MicrosoftHost.exe
The module MicrosoftHost.exe has been detected as Trojan.CoinMiner
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
7c4884f067e34d59c685665a7a8eb8dd |
| Size: |
5 MB |
| First Published: |
2024-05-16 23:01:03 (5 months ago) |
| Latest Published: |
2024-10-03 23:01:54 (2 days ago) |
| Status: |
Trojan.CoinMiner (on last analysis) |
|
| Analysis Date: |
2024-10-03 23:01:54 (2 days ago) |
| %commonappdata% |
| %commonappdata% |
| %commonappdata% |
| %sysdrive%\$recycle.bin\s-1-5-21-1164634071-2670574271-1157188808-1000 |
| %sysdrive%\$recycle.bin |
| %commonappdata% |
| %commonappdata% |
| %commonappdata% |
| %commonappdata% |
| %commonappdata% |
|
47.4% |
|
|
31.6% |
|
|
10.5% |
|
|
5.3% |
|
|
5.3% |
|
| Windows 10 |
78.9% |
|
| Windows 7 |
21.1% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x00365434 |
| Name |
Size of data |
MD5 |
| .text |
3811328 |
fb89ad21ff149b253b992442a3591b66 |
| .rdata |
1526272 |
3b16f27bc3606e34e8c82be8658ec02b |
| .data |
68096 |
e8b89eacb796926601e3ca52a588f739 |
| .pdata |
132096 |
a32e9097a5cd47a255b41c8413232e46 |
| _RANDOMX |
3584 |
9ee63642b94966ecb630ee0843e46b26 |
| _TEXT_CN |
10240 |
afea7882aa31e5987db2f12b8933de56 |
| _TEXT_CN |
4608 |
409bf3f918f2402291cb56c2e9354b47 |
| _RDATA |
512 |
0ff187c0a529a4aed5c7817dec579b20 |
| .rsrc |
64000 |
1b706f815ba6fe54c3c47f7508a16fd1 |
| .reloc |
33792 |
86eb9d8b5716f37ab19fd0409198134c |
